Endpoint & Data Protection
Ensuring organizational data assets are classified, protected, and monitored. Forcepoint DLP policy enforcement, USB device control, and Indonesian regulatory regex matching (NIK, NPWP, Bank Account Numbers).
Mukhamad Chandra Alem — IT Security Engineer, Jakarta. Hardened firewalls, clean endpoints, resilient core networks, and alerts that actually mean something.
Dedicated IT Security Engineer with 6+ years of enterprise experience across Banking, Financial Services, Government, and Telecommunications.
Good cybersecurity is invisible. It looks like nothing happening — no outage, no breach, no 3:00 AM emergency outage call.
I engineer that silence: hardened Palo Alto & Fortinet NGFW clusters, resilient F5 load balancers, enforced Forcepoint DLP rules, and architecture documentation the next engineer can actually trust.
IT Staff → IT Support Bank Mandiri → Lead Security Engineer
PCNSE • FCP Fortinet • Forcepoint DLP • ZTCA • Skybox
Banking • Financial Services • Mining • Government
Active/Passive NGFW HA • Zero unplanned cutover outages
Ensuring organizational data assets are classified, protected, and monitored. Forcepoint DLP policy enforcement, USB device control, and Indonesian regulatory regex matching (NIK, NPWP, Bank Account Numbers).
Architecting, configuring, and maintaining High-Availability firewall clusters. Centralized Panorama policy push, Fortinet Security Fabric, multi-tier DMZ isolation, and intrusion prevention tuning.
Managing high-throughput application load balancing and edge protection. F5 LTM virtual servers, SSL/TLS decryption profiles, DNSSEC validation, and DHCP perimeter security.
Implementing modern identity-centric microsegmentation and regulatory audit adherence. Zscaler ZTCA SASE deployment, Skybox attack surface assurance, and OJK / Bank Indonesia compliance.
Lead the implementation, maintenance, troubleshooting and operational management of enterprise security products across multiple customer environments.
Provided advanced (Tier 2) technical support and collaborated in system deployments and basic network device configurations.
Managed ticketing systems to ensure technical issues were resolved strictly within SLA limits and maintained LAN/WLAN network stability.
Supported IT infrastructure at the branch level, ensuring optimal function of banking applications, databases, and secure transaction flows.
Prepared, assembled, and maintained IT hardware endpoints for daily business operations and managed IT asset inventory.
Interested in discussing enterprise security engineering, firewall migration, DLP policies, or production infrastructure defense?